it's correct, since APOP method doesn't send user's paswword in clear-text,
and every time password send is different from the previous,
so it is impossible (and unreasonable) to learn apop-passwords.
New users should use clear-text password at first login to make this feature
work.

----- Original Message -----
From: "Paul Fries" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, September 07, 2002 5:09 AM
Subject: [vchkpw] APOP/Learned Passwords


>
> I have configured my system to enable learned passwords, and this is
> working as expected. Any user that logs in sets their password on the
> first authentication.
>
> However, I have noticed that users logging in with APOP are able to
> check their mail, but NO password is set in the database. Indeed they
> can put whatever they want in the password field, and they will still be
> allowed to check that POP box.
>
> I am using vpopmail 5.3.8 with --enable-roaming-users=y --enable-mysql=y
> --enable-clear-passwd=y --enable-learn-passwords=y
>
> Has anyone else experienced this?
>
> Thanks!
>
> Regards,
> Paul Fries
> [EMAIL PROTECTED]
>
>

Reply via email to